cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
885
Views
5
Helpful
4
Replies

CCUM 6.1 - syslog message

alanc3141592654
Level 1
Level 1

Hey Guys,

I'm getting the below alert in the system logs on our publisher call manager. There is about 10 ever minute. Anybody know what is causing this?

Many Thanks

Date: Feb 19 08:44:01
Machine Name: xxxxx01

Severity: Info
Process:  sshd(pam_unix)[17637]
Message: : session opened for user sftpuser by (uid=0)

Date: Feb 19 08:44:01


Machine Name: xxxxx01
Severity: Info
Process:  sshd(pam_unix)[17633]
Message: : session closed for user sftpuser

1 Accepted Solution

Accepted Solutions

That SFTP does not mean a billing server, but the connection between PUB and SUBs to transfer flat files. You're hitting the bug, no way to get rid of the messages

HTH

java

If this helps, please rate

www.cisco.com/go/pdihelpdesk

HTH

java

if this helps, please rate

View solution in original post

4 Replies 4

Jaime Valencia
Cisco Employee
Cisco Employee

They're probably because of this bug:

CSCsi87129   
CDR File transfer from Agents to Repository generates excessive syslog

Symptom:

Constant alerts in the publisher's Syslog (Event Viewer - System Log). Seen at the rate of 4 per minute:

Feb 12 00:51:51 CCM-PUB auth 6 sshd(pam_unix)[31368]: session opened for user sftpuser by (uid=0)
Feb 12 00:51:51 CCM-PUB auth 6 sshd(pam_unix)[31368]: session closed for user sftpuser
Feb 12 00:51:52 CCM-PUB auth 6 sshd(pam_unix)[31372]: session opened for user sftpuser by (uid=0)
Feb 12 00:51:52 CCM-PUB auth 6 sshd(pam_unix)[31372]: session closed for user sftpuser

Conditions:

Sending CDR files to external SFTP server.
System Enterprise Parameter "CDR File Time Interval" is set to '1', which creates CDR files every 1 min

Workaround:

None. This is addressed in CUCM 7.0 and later, where a persistent SFTP connection is used.

Notice it's NOT an alert: Severity: Info

There is nothing to worry about.

HTH

java

If this helps, please rate

www.cisco.com/go/pdihelpdesk

HTH

java

if this helps, please rate

Thanks for your reply!!

I guess there is no way of turning the logging off for this message?

thanks again

Alan

actually, the CDR files are being stored locally not visa SFTP

Any other thoughts?

Thanks,


A

That SFTP does not mean a billing server, but the connection between PUB and SUBs to transfer flat files. You're hitting the bug, no way to get rid of the messages

HTH

java

If this helps, please rate

www.cisco.com/go/pdihelpdesk

HTH

java

if this helps, please rate
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: